Cloud Security Engineer
Momentum Financial Services Group4 hours ago
Toronto, CanadaStaff+
Responsibilities
- Design and implement AWS security architectures aligned with compliance requirements and industry best practices.
- Assess cloud security risks, enforce policies, support audits, and manage AWS IAM, Organizations, and Control Tower.
- Deploy and manage AWS-native security services including Security Hub, GuardDuty, Macie, Inspector, WAF, and Shield.
- Configure encryption and key-management solutions using AWS KMS, CloudHSM, ACM, and Secrets Manager.
- Integrate AWS logging and monitoring with SIEM platforms for threat detection.
- Secure AWS networks using VPCs, Security Groups, ACLs, and PrivateLink.
- Embed security into DevOps and CI/CD workflows and automate controls with Terraform, CloudFormation, Python, Bash, and PowerShell.
- Apply security practices to AWS EKS, ECS, Fargate, Kubernetes, container, and serverless environments.
- Conduct vulnerability assessments, penetration testing, remediation, incident-response exercises, and disaster-recovery planning.
- Drive compliance with CIS AWS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS, and HIPAA.
- Train internal teams on cloud security risks, controls, and emerging practices.
Requirements
- 10+ years of IT/security experience, including 4+ years focused on AWS cloud security.
- Hands-on experience securing AWS IAM, VPC, EC2, S3, RDS, Lambda, EKS, ECS, Fargate, CloudFront, and Route 53.
- Strong knowledge of AWS-native security services including GuardDuty, Security Hub, Macie, Inspector, WAF, Shield, CloudTrail, and CloudWatch.
- Experience with encryption and key management using AWS KMS, CloudHSM, and ACM.
- Experience with infrastructure as code and automation using Terraform, CloudFormation, Python, Bash, and PowerShell.
- Experience securing containers, Kubernetes, and serverless workloads.
- Knowledge of Zero Trust, identity federation, and role-based access control in AWS environments.
- Experience with vulnerability scanning, penetration testing, audit readiness, SIEM/SOAR, incident response, and forensic analysis.
- Experience with Azure and GCP is preferred.
- A proven track record leading cloud security initiatives in regulated industries.
- A bachelor’s degree in Computer Science, Cybersecurity, or a related field is preferred.
- Professional certifications such as CISSP, AWS Security Specialty, or equivalent are strongly preferred.
Benefits
- Hybrid work environment balancing remote work and in-office work at the corporate head office.
- Health and dental plans with 100% of premiums covered, plus an Employee Assistance Program.
- Retirement savings options.
- Discretionary annual bonus based on individual performance and company success.
- Tuition assistance, professional-development reimbursement, Perkopolis discounts, and rewards and recognition programs.
- Collaborative corporate-office environment with breakout rooms and snacks.
Tech Stack
Categories
About Momentum Financial Services Group
Momentum Financial Services Group (MFSG) provides alternative financial services—short-term and installment loans, check cashing, money transfers, foreign currency, and prepaid cards—to consumers and small businesses. The Toronto-based private company operates the Money Mart brand, Canada’s largest non-bank branch network, and serves customers across Canada and the United States through retail locations and digital channels. MFSG has more than 40 years of operating history.